From 81e80c4b876e8e68bb8b022c39d0941e2c1ccb56 Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Wed, 9 Dec 2015 20:32:12 +0100 Subject: luci-base: properly handle ubus connections for non-root (#570, #571) Instead of relying on the connect-before-setuid hack, ship a proper acl definition file whitelisting the procedures that LuCI requires on its non-root pages. Signed-off-by: Jo-Philipp Wich --- modules/luci-base/root/usr/share/acl.d/luci-base.json | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 modules/luci-base/root/usr/share/acl.d/luci-base.json (limited to 'modules/luci-base/root/usr/share') diff --git a/modules/luci-base/root/usr/share/acl.d/luci-base.json b/modules/luci-base/root/usr/share/acl.d/luci-base.json new file mode 100644 index 0000000000..4d582366ff --- /dev/null +++ b/modules/luci-base/root/usr/share/acl.d/luci-base.json @@ -0,0 +1,8 @@ +{ + "user": "nobody", + "access": { + "system": { + "methods": [ "board", "info" ] + } + } +} -- cgit v1.2.3